General

  • Target

    JaffaCakes118_0b85660316a984f01c14f1d506baef2c

  • Size

    721KB

  • MD5

    0b85660316a984f01c14f1d506baef2c

  • SHA1

    96c2ada7dde2a3be12322912eb59e818e5eee237

  • SHA256

    9fb3df1f6e67997424bec5280384bfe71ea1244a5b5cd25d7b8744c4fe8b30f4

  • SHA512

    f86f3da64f772f17fa640a0ce1b7cddf156a32859a226a93788f72cc4990bab97d96bd549cb300ad373625fc5271105d4b1841f318a94bfdf29037b5e1ff1f84

  • SSDEEP

    12288:f4G8UaT9XY2siA0bMG09xD7I3Gg8ecgVvfBoCDBOQQYbVXpuy1f/gORix:f2UKoN0bUxgGa/pfBHDb+y1HgZ

Score
10/10

Malware Config

Extracted

Family

darkcomet

Attributes
  • gencode

  • install

    false

  • offline_keylogger

    false

  • persistence

    false

rc4.plain

Signatures

  • Darkcomet family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_0b85660316a984f01c14f1d506baef2c
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections